Block high risk agent identities from accessing resources

Policy conditions

Users

Agent identities only

Apps

All cloud apps

Risk

Agent identity risk: high

{
  "sessionControls": null,
  "conditions": {
    "userRiskLevels": [],
    "signInRiskLevels": [],
    "clientAppTypes": [
      "all"
    ],
    "servicePrincipalRiskLevels": [],
    "agentIdRiskLevels": "high",
    "insiderRiskLevels": null,
    "purviewDataLossPreventionRules": null,
    "agentSessionRiskLevels": null,
    "clients": null,
    "platforms": null,
    "locations": null,
    "times": null,
    "deviceStates": null,
    "devices": null,
    "authenticationFlows": null,
    "federatedTokens": null,
    "agents": null,
    "agentContext": null,
    "applications": {
      "includeApplications": [
        "All"
      ],
      "excludeApplications": [],
      "includeUserActions": [],
      "includeAuthenticationContextClassReferences": [],
      "applicationFilter": null,
      "networkAccess": null,
      "globalSecureAccess": null
    },
    "users": {
      "includeUsers": [
        "None"
      ],
      "excludeUsers": [],
      "includeGroups": [],
      "excludeGroups": [],
      "includeRoles": [],
      "excludeRoles": [],
      "includeGuestsOrExternalUsers": null,
      "excludeGuestsOrExternalUsers": null
    },
    "clientApplications": {
      "includeServicePrincipals": [],
      "includeAgentIdServicePrincipals": [
        "All"
      ],
      "excludeServicePrincipals": [],
      "excludeAgentIdServicePrincipals": [],
      "servicePrincipalFilter": null,
      "agentIdServicePrincipalFilter": null
    }
  },
  "grantControls": {
    "operator": "OR",
    "builtInControls": [
      "block"
    ],
    "customAuthenticationFactors": [],
    "termsOfUse": [],
    "authenticationStrength@odata.context": "https://graph.microsoft.com/beta/$metadata#conditionalAccess/templates('6bdcbbb7-ebd1-4f8f-a02f-652db0e3665d')/details/grantControls/authenticationStrength/$entity",
    "authenticationStrength": null
  },
  "displayName": "Block high risk agent identities from accessing resources",
  "Tag": "Entra Template"
}